Smart network interface controller signature database emulation

Abstract

An information handling system may include a management controller configured to provide out-of-band management of the information handling system, and a network interface controller comprising a network interface controller storage resource. The management controller may be configured to: receive an update bundle cryptographically signed by a manufacturer of the information handling system, wherein the update bundle includes at least one signature associated with a network interface controller operating system (OS) configured to be executed by the network interface controller; and transmit the at least one signature to the network interface controller. The network interface controller may be configured to install the network interface controller OS to the network interface controller storage resource based on the at least one signature.

What is claimed is: 
     
       1. An information handling system comprising:
 a management controller configured to provide out-of-band management of the information handling system; and 
 a network interface controller comprising a network interface controller storage resource; 
 wherein the management controller is configured to:
 receive an update bundle cryptographically signed by a manufacturer of the information handling system, wherein the update bundle includes at least one signature associated with a network interface controller operating system (OS) configured to be executed by the network interface controller, and wherein the update bundle is an identity module update bundle associated with rebranding and/or customization of the information handling system; 
 transmit the at least one signature to the network interface controller; and 
 responsive to the network interface controller being removed from the information handling system and installed in a different information handling system, implement a user-configurable policy setting regarding management of the at least one signature, wherein the user-configurable policy setting directs the at least one signature to remain with the information handling system or to follow the network interface controller to the different information handling system; and 
 
 wherein the network interface controller is configured to install the network interface controller OS to the network interface controller storage resource based on the at least one signature. 
 
     
     
       2. The information handling system of  claim 1 , wherein the network interface controller is a SmartNIC. 
     
     
       3. The information handling system of  claim 1 , wherein the at least one signature is a Secure Boot signature. 
     
     
       4. A method comprising, in an information handling system including a management controller configured to provide out-of-band management of the information handling system and a network interface controller that includes a network interface controller storage resource:
 the management controller receiving an update bundle cryptographically signed by a manufacturer of the information handling system, wherein the update bundle includes at least one signature associated with a network interface controller operating system (OS) configured to be executed by the network interface controller, and wherein the update bundle is an identity module update bundle associated with rebranding and/or customization of the information handling system; 
 the management controller transmitting the at least one signature to the network interface controller; 
 the management controller, responsive to the network interface controller being removed from the information handling system and installed in a different information handling system, implementing a user-configurable policy setting regarding management of the at least one signature, wherein the user-configurable policy setting directs the at least one signature to remain with the information handling system or to follow the network interface controller to the different information handling system; and 
 the network interface controller installing the network interface controller OS to the network interface controller storage resource based on the at least one signature. 
 
     
     
       5. The method of  claim 4 , wherein the network interface controller is a SmartNIC. 
     
     
       6. The method of  claim 4 , wherein the at least one signature is a Secure Boot signature. 
     
     
       7. An article of manufacture comprising a non-transitory, computer-readable medium having instructions thereon that are executable by at least one processor of a management controller of an information handling system for:
 receiving an update bundle cryptographically signed by a manufacturer of the information handling system, wherein the update bundle includes at least one signature associated with a network interface controller operating system (OS) configured to be executed by a network interface controller of the information handling system, and wherein the update bundle is an identity module update bundle associated with rebranding and/or customization of the information handling system; and 
 transmitting the at least one signature to the network interface controller; and 
 responsive to the network interface controller being removed from the information handling system and installed in a different information handling system, implementing a user-configurable policy setting regarding management of the at least one signature, wherein the user-configurable policy setting directs the at least one signature to remain with the information handling system or to follow the network interface controller to the different information handling system; and 
 wherein the network interface controller is configured to install the network interface controller OS to a network interface controller storage resource thereof based on the at least one signature. 
 
     
     
       8. The article of  claim 7 , wherein the network interface controller is a SmartNIC. 
     
     
       9. The article of  claim 7 , wherein the at least one signature is a Secure Boot signature.